PT-2013-4166 · Microsoft · Windows Vista+6

J00Ru + 1 · Publicado 2013-06-11 · Atualizado 2019-02-26 · CVE-2013-3136

Positive Technologies (AI Summary)

CVSS v2.0

4.4

Média

Vetor base

AV:L/AC:M/Au:S/C:C/I:N/A:N

Name of the Vulnerable Software and Affected Versions Windows XP version SP3 Windows Server 2003 version SP2 Windows Vista version SP2 Windows Server 2008 version SP2 Windows 7 version SP1 Windows 8 on 32-bit platforms

Description An issue exists where the Windows kernel does not properly handle objects in memory, allowing local users to obtain sensitive information from kernel memory. This could be achieved via a crafted application.

Recommendations For Windows XP SP3, update to a newer version to mitigate the risk. For Windows Server 2003 SP2, update to a newer version to mitigate the risk. For Windows Vista SP2, update to a newer version to mitigate the risk. For Windows Server 2008 SP2, update to a newer version to mitigate the risk. For Windows 7 SP1, update to a newer version to mitigate the risk. For Windows 8 on 32-bit platforms, update to a newer version to mitigate the risk.

Correção

Enumeração de Fraquezas

CWE-399

Identificadores relacionados

CVE-2013-3136

Produtos afetados

Windows

Windows 7

Windows 8

Windows Server 2003

Windows Server 2008

Windows Vista

Windows Xp

Referências · 6

• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-048 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2013-3136 · Nota de Segurança
• http://us-cert.gov/ncas/alerts/TA13-168A · Nota
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16847 · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-3136 · Nota de Segurança
• http://technet.microsoft.com/en-us/security/bulletin/ms13-048 · Nota